nod-mcp-server
Officialnod-mcp-server
Именно так ИИ-агенты будут взаимодействовать с компаниями — не через парсинг, а путем чтения структурированных манифестов. Этот эталонный MCP-сервер обучает любой MCP-совместимый клиент (Claude Desktop, агентские фреймворки, IDE) читать манифест nod.json компании по адресу https://{domain}/.well-known/nod.json и отвечать на реальные вопросы о том, что может делать бизнес: заказывать еду, записываться на прием, искать товары, проверять цены и многое другое.
Он предоставляет два инструмента — lookup_nod и check_capability — и включает четыре демонстрационных манифеста, работающих локально, поэтому демо работает «из коробки» без каких-либо внешних зависимостей.
Установка
git clone <this repo> nod-mcp-server
cd nod-mcp-server
npm install
npm run buildТребуется Node.js 20+.
Related MCP server: Vexi MCP Server
Запуск сервера демонстрационных манифестов
Поскольку почти ни один реальный сайт еще не публикует nod.json, этот репозиторий содержит четыре примера манифестов (ресторан, электронная коммерция, SaaS, здравоохранение) и обслуживает их локально.
npm run demo:manifestsВы должны увидеть:
NOD demo manifest server listening on http://localhost:3456
http://localhost:3456/demo-restaurant.localhost/nod.json
http://localhost:3456/demo-shop.localhost/nod.json
http://localhost:3456/demo-saas.localhost/nod.json
http://localhost:3456/demo-health.localhost/nod.jsonОставьте этот терминал запущенным во время демонстрации. MCP-сервер автоматически перенаправляет любой домен *.localhost на этот сервер.
Настройка Claude Desktop
Откройте (или создайте) ~/Library/Application Support/Claude/claude_desktop_config.json в macOS (или %APPDATA%\Claude\claude_desktop_config.json в Windows) и добавьте:
{
"mcpServers": {
"nod": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/nod-mcp-server/dist/index.js"]
}
}
}Замените /ABSOLUTE/PATH/TO/nod-mcp-server на полный путь к этой папке (например, /Users/you/projects/nod-mcp-server). Перезапустите Claude Desktop. Теперь вы должны увидеть сервер nod в списке инструментов Claude с двумя инструментами: lookup_nod и check_capability.
60-секундный сценарий демонстрации
Когда сервер демонстрационных манифестов запущен в одном терминале, а Claude Desktop настроен, вставляйте эти запросы в Claude один за другим.
1. "Look up the NOD manifest for demo-restaurant.localhost"
Claude вызывает lookup_nod({ domain: "demo-restaurant.localhost" }) и возвращает что-то вроде:
# Pike Place Noodle House (restaurant)
Hand-pulled noodles, dumplings, and regional Chinese classics...
- URL: https://demo-restaurant.localhost
- Manifest: http://localhost:3456/demo-restaurant.localhost/nod.json
## Declared capabilities
- purchase
- booking
- view_menu
- order_food
- book_table
## Supported actions
- purchase → https://demo-restaurant.localhost/api/orders [auth: api_key]
- booking → https://demo-restaurant.localhost/api/reservations [auth: api_key]
- search → https://demo-restaurant.localhost/api/menu/search [auth: none]2. "Can I order food from demo-restaurant.localhost?"
Claude вызывает check_capability({ domain: "demo-restaurant.localhost", action: "order_food" }):
YES — demo-restaurant.localhost supports "order_food".
Manifest declares "order_food" under discovery.mcp_server.capabilities.
Endpoint: POST https://demo-restaurant.localhost/api/orders
Authentication: api_key
Matched via: discovery.mcp_server.capabilities
Constraints:
{ "require_human_confirmation": { "purchases_above": 150, ... },
"rate_limits": { "transactions": { "requests": 10, "period": "minute" } },
"allow_automated_purchases": true }3. "What actions does demo-shop.localhost support?"
Claude вызывает lookup_nod({ domain: "demo-shop.localhost" }) и подводит итог: поиск товаров, цены, проверка наличия и размещение заказа с защитой OAuth2 — с порогом подтверждения человеком в $500 и политикой возврата в течение 60 дней.
Бонусные запросы
"Book an appointment at demo-health.localhost — what does that flow require?"→ возвращает эндпоинт для записи, обязательные поля (patient_name, DOB, reason, provider_id, preferred_date), области действия OAuth2 и политику отмены."Does demo-saas.localhost allow automated purchases?"→ возвращает НЕТ с URL-адресом для связи с человеком, так как в манифесте установленоallow_automated_purchases: false.
Справочник инструментов
lookup_nod
Входные данные | Тип | Описание |
| string | Только домен (без схемы, без пути). Домены |
Получает https://{domain}/.well-known/nod.json, с переходом на https://{domain}/nod.json в случае неудачи. Возвращает структурированную сводку: идентификационные данные компании, заявленные возможности, поддерживаемые действия (с эндпоинтами + аутентификацией), API-эндпоинты и способы связи. В случае ошибки возвращает четкое сообщение «манифест не найден».
check_capability
Входные данные | Тип | Описание |
| string | Только домен. |
| string | Распространенные значения: |
Получает манифест и проверяет действие по transactions.capabilities, discovery.mcp_server.capabilities, support.contact.mcp_server.capabilities и структурным эндпоинтам (transactions.purchase, discovery.search, information.pricing и т. д.). Возвращает вердикт «да/нет», URL эндпоинта, метод аутентификации и ограничения политики (лимиты запросов, пороги подтверждения человеком).
Как работает маршрутизация *.localhost
Когда MCP-сервер получает домен, заканчивающийся на .localhost, он выполняет запрос к http://localhost:3456/{domain}/nod.json вместо обычного well-known URL. Это делает демо автономным — вы можете направить Claude на demo-restaurant.localhost и получить реальные результаты без настройки DNS или HTTPS.
Переменные окружения:
NOD_LOCAL_PORT— порт, на котором слушает сервер демонстрационных манифестов (по умолчанию3456)NOD_LOCAL_MANIFEST_SERVER— базовый URL, который MCP-сервер использует для поиска.localhost(по умолчаниюhttp://localhost:3456)NOD_FORCE_LOCAL=1— направлять каждый домен через локальный сервер манифестов (полезно для участников, тестирующих новые примеры манифестов)
Что дальше
Опубликуйте nod.json для своего бизнеса, используя спецификацию протокола NOD на opennod.ai/protocol. Написание минимального валидного манифеста занимает около 30 минут — и как только он появится по адресу https://yourdomain.com/.well-known/nod.json, любой агент, использующий этот MCP-сервер (или любой другой клиент с поддержкой NOD), сможет найти ваш бизнес и воспользоваться его возможностями.
Лицензия
MIT
Available Tools
2 toolscheck_capabilityCheck a NOD capabilityA
Given a domain and an action (e.g. order_food, book_appointment, search_products, get_pricing, view_menu, book_table, check_status, create_account), fetches the business's NOD manifest and reports whether the action is supported, the endpoint URL, authentication requirements, and any policy constraints.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The domain to check (e.g. "demo-restaurant.localhost"). | |
| action | Yes | The action to check. Common values: order_food, place_order, view_menu, book_table, book_appointment, search_products, find_provider, get_pricing, check_inventory, check_status, create_account, get_docs, contact_support. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description carries full behavioral disclosure. It explains what the tool does and returns, but does not mention side effects, prerequisites (e.g., domain validity), or that it is read-only.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Single sentence covering purpose, input, and output. Very concise with no wasted words, though slightly dense; could be broken into two sentences for readability, but still effective.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
No output schema, but description adequately covers return fields (supported status, endpoint, auth, policies). Input is fully described. Missing error handling and sibling differentiation, but sufficient for the tool's simplicity.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100%, so baseline is 3. The description adds value by listing common actions, providing concrete examples that aid selection beyond the schema's generic string type.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states the tool checks if an action is supported for a given domain, listing output details. It differentiates from the sibling 'lookup_nod' by focusing on a specific action check.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No guidance on when to use this tool versus 'lookup_nod' or when not to use it. The description only implies usage through examples, lacking explicit context.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
lookup_nodLook up NOD manifestA
Fetches a business's NOD Protocol manifest from https://{domain}/.well-known/nod.json (or the local demo server for *.localhost domains) and returns a structured summary: business identity, declared capabilities, supported actions, API endpoints, and contact methods.
| Name | Required | Description | Default |
|---|---|---|---|
| domain | Yes | The domain to look up (e.g. "example.com" or "demo-restaurant.localhost"). Do not include scheme or path. |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations are provided, so the description must carry full behavioral transparency. It discloses the fetch action and return summary but does not address potential failure modes (e.g., domain not found, malformed manifest), rate limits, or authentication requirements. The description is adequate but incomplete for a safe agent invocation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
The description is a single sentence that efficiently conveys the main purpose and key details (URL pattern, return contents). It is front-loaded and includes relevant information without excess words. However, it is somewhat dense and could be split into two sentences for improved readability.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
Given the low complexity (single parameter, no output schema), the description provides sufficient context: it specifies the source URL, the domain format, and the contents of the returned summary. It does not cover error handling or exact output structure, but for a simple lookup tool it is reasonably complete.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has 100% description coverage for the single 'domain' parameter. The description adds context about the URL pattern but reiterates the format constraint already present in the schema. Since schema coverage is high, the baseline of 3 is appropriate; the description does not significantly add meaning beyond the schema.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description clearly states it fetches a NOD Protocol manifest from a well-known URL and returns a structured summary including business identity, capabilities, actions, endpoints, and contact methods. It uses a specific verb-resource combination and distinguishes itself from the sibling tool 'check_capability' by focusing on the full manifest.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The description explains what the tool does but provides no guidance on when to use it versus the sibling 'check_capability', nor does it mention prerequisites or exclusions. The usage context is implied (looking up a domain's manifest) but lacks explicit alternative differentiation.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
2 tool updates
v0.1.0- First observed
check_capability - First observed
lookup_nod
TDQS
Scored across 2 tools
The two tools have clearly distinct purposes: check_capability validates a specific action against a business's manifest, while lookup_nod retrieves and summarizes the entire manifest. There is no overlap or ambiguity between them, as one is for targeted validation and the other for general information retrieval.
Both tools follow a consistent verb_noun pattern with snake_case naming: check_capability and lookup_nod. The verbs 'check' and 'lookup' are semantically appropriate and distinct, and the naming style is uniform throughout the set.
With only two tools, the server feels under-scoped for its apparent purpose of interacting with NOD Protocol manifests. While the tools cover basic retrieval and validation, the lack of tools for actions like updating manifests, managing policies, or executing supported actions suggests a thin surface that may limit agent functionality.
The tool set is significantly incomplete for the NOD Protocol domain. It provides read-only access to manifests but lacks tools for creating, updating, or deleting manifests, or for actually executing the supported actions (e.g., order_food, book_appointment). This creates dead ends where agents can inspect but not interact with the business capabilities.
Maintenance
Related MCP Connectors
Discover what websites across the agentic web can do — query the capabilities.txt registry.
Find governed AI capabilities and verify signed receipts. Read-only, no account.
Directory of APIs, merchants, and tools AI agents can actually use.
Discover, read and book verified real-world businesses through one endpoint.
Related MCP Servers
- AlicenseAqualityDmaintenanceEnables AI agents to discover and interact with business capabilities by reading structured nod.json manifests from domains, supporting actions like ordering, booking, and searching.2MIT

Vexi MCP Serverofficial
AlicenseAqualityDmaintenanceEnables MCP clients to search and retrieve structured business data from the Vexi API, allowing AI agents to get clean, typed business objects with identity, offerings, and trust signals.48 npmMIT- AlicenseAqualityDmaintenanceEnables agents to search, retrieve, and contribute business data from a directory of 11M+ businesses across 195 countries, returning markdown prose by default.22115 npm3MIT
- AlicenseAqualityCmaintenanceProvides AI agents with access to real, verifiable businesses with provenance and source URLs, enabling natural-language business search and profile retrieval.2MIT